What is the best way of securing chat widget?

[severfire]

Hello,

I want to integrate chat widget into app that requires login. I wonder how I could secure API key or chat best way? Is the only way to write custom chat that connects to API?

Thanks!
a.

[severfire]

Would using .htaccess Content Security Policy and allowing only selected IPs to access the widget/langflow would be good idea?